Information Systems Security Engineer

ECS Tech Inc • Fort Meade, MD

15d • $120,000 - $150,000 • Onsite

About The Position

The Information Systems Security Engineer will lead security architecture hardening, vulnerability mitigation, and continuous accreditation for multi-tenant systems operating within a Combined Information Environment (CIE) and Mission Partner Environment (MPE). In this role, you will be responsible for defining, implementing, and validating technical security controls across hybrid compute infrastructure composed of enterprise virtual machines, container orchestration clusters, and virtual desktop delivery pipelines. You will interface directly with Five Eyes (FVEY) coalition partners, systems architects, ISSMs/ISSOs, and operational defense personnel to ensure that all data flows, boundary enforcement points, and identity federation services adhere to rigorous DoD security baselines, zero-trust principles, and Risk Management Framework (RMF) standards.

Requirements

• U.S. Citizen.
• Active Secret security clearance.
• Bachelor's degree with 5+ years of progressive experience in cybersecurity engineering, systems security, or security architecture (Mid to Senior level). Alternatively, a Master's degree with 3+ years of experience.
• DoD 8570/8140 Baseline: Active IAT Level III or IAM Level II/III certification (e.g., CISSP, CASP+ CE, CISM, or equivalent).
• Linux & Server Security: Strong hands-on experience hardening and auditing Red Hat Enterprise Linux (RHEL) platforms via DISA STIGs, SCAP tools, OpenSCAP, and SELinux enforcement.
• Virtualization & VDI Security: Practical experience securing virtualized infrastructure (VMware ESXi, vCenter, vSAN) and enterprise VDI deployments supporting multi-classification or multi-tenant desktop access.
• Container Security Concepts: Working knowledge of securing containerized environments and Kubernetes (K8s) deployments (runtime security, image scanning, network policies, RBAC, and secrets management).
• Vulnerability Analysis: Demonstrated expertise with ACAS/Nessus, STIG Viewer, and CVE lifecycle management (triage, exploitation risk analysis, and patch remediation).
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Responsibilities

• Multi-Domain & Enclave Boundary Defense: Design, enforce, and audit boundary security mechanisms, network access control policies, and cross-domain controls isolating mission-specific enclaves while facilitating secure multilateral information sharing among FVEY mission partners.
• Virtualization & Hypervisor Security: Apply and validate DISA Security Technical Implementation Guides (STIGs) and hardening benchmarks across enterprise hypervisors (VMware vSphere/ESXi), virtual machines, management planes (vCenter), and software-defined storage backends.
• Linux & Endpoint System Hardening: Maintain baseline configuration compliance and host-based security across Red Hat Enterprise Linux (RHEL) server platforms, Windows infrastructure, and enterprise Virtual Desktop Infrastructure (VDI) (VMware Horizon / Citrix), mitigating vulnerabilities across shared and non-persistent virtual pools.
• Continuous Monitoring & Vulnerability Management: Execute automated vulnerability scanning (e.g., Trellix, ACAS), analyze Common Vulnerabilities and Exposures (CVEs), generate Plan of Action and Milestones (POA&Ms), and engineer automated or scripted remediation actions across VM and VDI fleets.
• Accreditation & Documentation: Translate complex infrastructure topologies and system data flows into comprehensive RMF accreditation artifacts (System Security Plans [SSPs], Security Assessment Reports [SARs], Interface Control Documents [ICDs]). Collaborate with Systems Architects to evaluate architectural models (Visio / Cameo SysML) for cybersecurity posture and zero-trust compliance.
• Other duties, as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level